Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
File:                     tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json)
Hash identifier:          TD/ewQYDUEyBohulnArNVaNyYiufJ5VDqFwd+jmK3e0=
Subject key identifier:   9B:A8:1B:D4:72:C3:A8:D0:10:62:A7:BC:1A:30:26:CD:35:FF:63:46
Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
Certificate issuer:       /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Certificate serial:       064B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
Manifest number:          06FA
Signing time:             Sun 26 Jul 2026 23:33:36 +0000
Manifest this update:     Sun 26 Jul 2026 23:33:36 +0000
Manifest next update:     Sun 02 Aug 2026 23:33:36 +0000
Files and hashes:         1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: oZ/WkTXLnFkl/HhHz/ScK5t91E7u7yfibPayYAxA4KI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
        Validity
            Not Before: Jul 26 23:33:36 2026 GMT
            Not After : Aug  2 23:33:36 2026 GMT
        Subject: CN=6a669950-66ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:0b:f5:b6:34:47:a7:8d:b5:63:85:d9:cf:
                    82:00:f4:dd:2c:c6:1d:d3:24:35:13:7a:8c:22:03:
                    4a:7c:08:99:ab:c6:69:39:cd:20:fc:35:1c:0e:f8:
                    c2:42:86:63:d8:ed:79:78:67:5f:4c:80:d0:9c:3d:
                    b5:98:3f:94:3e:e8:1b:10:be:9b:91:a5:9a:42:66:
                    c7:12:1e:0c:28:86:a1:e1:9f:59:17:90:5f:48:f7:
                    6c:8c:ab:b2:f3:2f:10:01:69:e6:33:c2:51:48:46:
                    bd:d0:b9:cb:4a:36:41:59:6c:78:74:7a:e6:f0:8e:
                    40:79:6e:e4:9d:46:c3:b0:d8:af:61:c9:8c:df:c1:
                    24:93:f1:10:77:83:35:24:fa:9f:0d:16:07:8a:1c:
                    6d:d1:65:ce:96:ea:f7:55:ab:36:6c:16:19:77:d9:
                    8e:76:d6:54:f5:37:72:36:4a:4c:40:c1:3e:8d:01:
                    0a:af:d7:62:42:49:06:31:aa:08:d0:2c:32:2e:8d:
                    48:c6:10:42:3f:67:91:04:62:b7:88:2a:a8:fd:41:
                    d4:70:77:56:6b:a5:b8:47:41:b1:a1:df:30:be:72:
                    80:0c:a5:36:ae:a6:06:42:e0:4a:e5:7c:be:e9:a0:
                    e1:87:5a:d5:2c:fe:54:da:29:30:f8:d9:b3:de:41:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A8:1B:D4:72:C3:A8:D0:10:62:A7:BC:1A:30:26:CD:35:FF:63:46
            X509v3 Authority Key Identifier:
                keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:09:3e:d3:ed:5d:76:f5:e9:27:f2:4e:73:72:e3:58:75:
         aa:5c:70:43:ef:98:74:c6:c0:15:76:73:01:08:5d:0b:41:49:
         b4:c1:bc:25:65:fe:bb:b4:d5:a5:44:0e:ae:59:0d:71:24:14:
         7f:1d:ba:46:8f:15:e2:0d:c6:31:b4:c3:25:5c:60:48:c3:ed:
         c7:fc:10:5e:f6:f4:01:05:7c:04:3b:85:ea:b2:f9:ce:26:a3:
         fc:35:22:1a:51:e0:19:6f:73:7c:16:ac:39:f6:81:26:26:dd:
         c7:31:88:e8:89:17:9c:ad:6c:b2:a6:4b:3f:81:7a:c5:70:18:
         bb:3d:94:f2:b3:c7:72:22:11:5c:74:20:7c:09:c4:22:c4:8a:
         a2:71:a3:64:30:fa:0e:9b:29:59:b8:1f:dc:4e:7e:e5:19:c9:
         d0:df:d0:c3:df:9c:25:9f:7a:9a:7c:00:e5:15:89:0c:b1:7e:
         ee:bf:c2:25:da:f2:4f:0f:cf:83:76:d9:78:03:c7:6d:d7:31:
         9e:21:43:62:1c:02:20:ca:10:36:9c:1d:74:b3:fb:cb:ac:a7:
         b0:84:b0:cc:3a:b9:06:0f:ec:8d:0e:8c:1a:9c:e7:a4:d5:85:
         cd:92:04:4e:24:6a:89:53:a2:a5:1f:2e:64:47:16:6c:a8:78:
         4e:53:68:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:31:13 2026 by rpki-client